Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Gitea: Remote Code Execution via diffpatch Git Hook Installation BIT-gitea-2026-60004, CVE-2026-60004, GHSA-rcr6-4jqh-j84m, GO-2026-6433 | CriticalExploited | 24.0% | 26 Aug, 2026 | Go code.gitea.io/gitea Go gitea.dev |
Trivy ecosystem supply chain was briefly compromised CVE-2026-33634, GHSA-69fq-xp46-6x23, GO-2026-4919 | CriticalExploited | 59.7% | 23 Mar, 2026 | GitHub Actions aquasecurity/setup-trivy GitHub Actions aquasecurity/trivy-action Go github.com/aquasecurity/trivy |
Gogs vulnerable to a bypass of CVE-2024-55947 CVE-2025-8110, GHSA-mq8m-42gh-wq7r, GO-2025-4225 | HighExploited | 85.2% | 10 Dec, 2025 | Go gogs.io/gogs |
Wazuh server vulnerable to remote code execution CVE-2025-24016, GHSA-hcrc-79hj-m3qh, GO-2025-3459 | CriticalExploited | 93.8% | 10 Feb, 2025 | Go github.com/wazuh/wazuh |
HTTP/2 Stream Cancellation Attack BIT-apisix-2023-44487, BIT-aspnet-core-2023-44487, BIT-contour-2023-44487, BIT-dotnet-2023-44487, BIT-dotnet-sdk-2023-44487, BIT-envoy-2023-44487, BIT-golang-2023-44487, BIT-jenkins-2023-44487, BIT-kong-2023-44487, BIT-nginx-2023-44487, BIT-nginx-gateway-2023-44487, BIT-node-2023-44487, BIT-node-min-2023-44487, BIT-solr-2023-44487, BIT-tomcat-2023-44487, BIT-varnish-2023-44487, CVE-2023-44487, GHSA-qppj-fm5r-hxr3 | HighExploited | 100.0% | 10 Oct, 2023 | Go golang.org/x/net Maven com.typesafe.akka:akka-http-core Maven com.typesafe.akka:akka-http-core_2.11 Maven com.typesafe.akka:akka-http-core_2.12 +8 more |
libwebp: OOB write in BuildHuffmanTable A-299477569, ASB-A-299477569, CVE-2023-4863, CVE-2023-5129, GHSA-j7hp-h8jx-5ppr, PYSEC-2026-1794, RUSTSEC-2023-0060, RUSTSEC-2023-0061 | HighExploited | 100.0% | 12 Sep, 2023 | Go github.com/chai2010/webp NuGet SkiaSharp NuGet magick.net-q16-anycpu NuGet magick.net-q16-hdri-anycpu +10 more |
Privilege Escalation on Linux/MacOS CVE-2023-28434, GHSA-2pxw-r47w-4p8c | HighExploited | 7.9% | 22 Mar, 2023 | Go github.com/minio/minio |
Grafana path traversal BIT-grafana-2021-43798, CVE-2021-43798, GHSA-8pjx-jj86-j47p | HighExploited | 88.5% | 07 Dec, 2021 | Go github.com/grafana/grafana |
Authentication bypass for viewing and deletions of snapshots BIT-grafana-2021-39226, CVE-2021-39226, GHSA-69j6-29vr-p3j9 | HighExploited | 99.9% | 05 Oct, 2021 | Go github.com/grafana/grafana |
Certificate validation bypass on Windows in crypto/x509 BIT-golang-2020-0601, CVE-2020-0601, GO-2022-0535 | HighExploited | 89.1% | 14 Jan, 2020 | Go stdlib |